coldbraid

CVE-2022-30525 Zyxel Multiple Firewalls

A command injection vulnerability in the CGI program of some Zyxel firewall versions could allow an attacker to modify specific files and then execute some OS commands on a vulnerable device.

CVSS
not scored

CWE-78

On CISA’s exploited list

Zyxel Multiple Firewalls OS Command Injection Vulnerability

Added
2022-05-16
Federal patch deadline
2022-06-06
Ransomware use
not known